The package includes a README, a license file, and no install-time scripts. Its declared BSD-3-Clause license conflicts with the detected GPL-2.0 file, and the repository does not clearly identify the package.
38%
Total Score
25
67
100
The package has had no registry release in more than five years, despite 28 releases historically. This is strong evidence of abandonment risk for a CMS integration package.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.
A license file is present, but the manifest declares BSD-3-Clause while the artifact license file was detected as GPL-2.0. The mismatch needs legal clarification before adoption.
There were no new or closed issues or pull requests in the last month, while 36 issues and 9 pull requests remain open. This suggests unresolved maintenance demand.
The repository name does not match the package name and its README does not mention the package, so the linked source may not clearly correspond to this release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version 1.39.1 | — | — |
silverstripe/cms Version ^4 | — | — |
johngrogg/ics-parser Version ^2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.